Home Explore Help
Sign In
msc
/
speck_slides
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 86e0de70fa
Branches Tags
speck_slides
/
slides.html

slides.html 36 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666 
  1. <!DOCTYPE html>
    2. 

  2. <html>
    3. 

  3. <head>
    4. 

  4.   <meta charset="utf-8">
    5. 

  5.   <meta name="generator" content="pandoc">
    6. 

  6.   <meta name="author" content="Robin Dietrich &amp; Marius Schwarz">
    7. 

  7.   <title>CPA Angriff auf Speck</title>
    8. 

  8.   <meta name="apple-mobile-web-app-capable" content="yes">
    9. 

  9.   <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
    10. 

  10.   <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, minimal-ui">
    11. 

  11.   <link rel="stylesheet" href="./reveal.js/dist/reset.css">
    12. 

  12.   <link rel="stylesheet" href="./reveal.js/dist/reveal.css">
    13. 

  13.   <style>
    14. 

  14.     code{white-space: pre-wrap;}
    15. 

  15.     span.smallcaps{font-variant: small-caps;}
    16. 

  16.     span.underline{text-decoration: underline;}
    17. 

  17.     div.column{display: inline-block; vertical-align: top; width: 50%;}
    18. 

  18.     div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
    19. 

  19.     ul.task-list{list-style: none;}
    20. 

  20.     pre > code.sourceCode { white-space: pre; position: relative; }
    21. 

  21.     pre > code.sourceCode > span { display: inline-block; line-height: 1.25; }
    22. 

  22.     pre > code.sourceCode > span:empty { height: 1.2em; }
    23. 

  23.     .sourceCode { overflow: visible; }
    24. 

  24.     code.sourceCode > span { color: inherit; text-decoration: inherit; }
    25. 

  25.     div.sourceCode { margin: 1em 0; }
    26. 

  26.     pre.sourceCode { margin: 0; }
    27. 

  27.     @media screen {
    28. 

  28.     div.sourceCode { overflow: auto; }
    29. 

  29.     }
    30. 

  30.     @media print {
    31. 

  31.     pre > code.sourceCode { white-space: pre-wrap; }
    32. 

  32.     pre > code.sourceCode > span { text-indent: -5em; padding-left: 5em; }
    33. 

  33.     }
    34. 

  34.     pre.numberSource code
    35. 

  35.       { counter-reset: source-line 0; }
    36. 

  36.     pre.numberSource code > span
    37. 

  37.       { position: relative; left: -4em; counter-increment: source-line; }
    38. 

  38.     pre.numberSource code > span > a:first-child::before
    39. 

  39.       { content: counter(source-line);
    40. 

  40.         position: relative; left: -1em; text-align: right; vertical-align: baseline;
    41. 

  41.         border: none; display: inline-block;
    42. 

  42.         -webkit-touch-callout: none; -webkit-user-select: none;
    43. 

  43.         -khtml-user-select: none; -moz-user-select: none;
    44. 

  44.         -ms-user-select: none; user-select: none;
    45. 

  45.         padding: 0 4px; width: 4em;
    46. 

  46.         color: #aaaaaa;
    47. 

  47.       }
    48. 

  48.     pre.numberSource { margin-left: 3em; border-left: 1px solid #aaaaaa;  padding-left: 4px; }
    49. 

  49.     div.sourceCode
    50. 

  50.       {   }
    51. 

  51.     @media screen {
    52. 

  52.     pre > code.sourceCode > span > a:first-child::before { text-decoration: underline; }
    53. 

  53.     }
    54. 

  54.     code span.al { color: #ff0000; font-weight: bold; } /* Alert */
    55. 

  55.     code span.an { color: #60a0b0; font-weight: bold; font-style: italic; } /* Annotation */
    56. 

  56.     code span.at { color: #7d9029; } /* Attribute */
    57. 

  57.     code span.bn { color: #40a070; } /* BaseN */
    58. 

  58.     code span.bu { } /* BuiltIn */
    59. 

  59.     code span.cf { color: #007020; font-weight: bold; } /* ControlFlow */
    60. 

  60.     code span.ch { color: #4070a0; } /* Char */
    61. 

  61.     code span.cn { color: #880000; } /* Constant */
    62. 

  62.     code span.co { color: #60a0b0; font-style: italic; } /* Comment */
    63. 

  63.     code span.cv { color: #60a0b0; font-weight: bold; font-style: italic; } /* CommentVar */
    64. 

  64.     code span.do { color: #ba2121; font-style: italic; } /* Documentation */
    65. 

  65.     code span.dt { color: #902000; } /* DataType */
    66. 

  66.     code span.dv { color: #40a070; } /* DecVal */
    67. 

  67.     code span.er { color: #ff0000; font-weight: bold; } /* Error */
    68. 

  68.     code span.ex { } /* Extension */
    69. 

  69.     code span.fl { color: #40a070; } /* Float */
    70. 

  70.     code span.fu { color: #06287e; } /* Function */
    71. 

  71.     code span.im { } /* Import */
    72. 

  72.     code span.in { color: #60a0b0; font-weight: bold; font-style: italic; } /* Information */
    73. 

  73.     code span.kw { color: #007020; font-weight: bold; } /* Keyword */
    74. 

  74.     code span.op { color: #666666; } /* Operator */
    75. 

  75.     code span.ot { color: #007020; } /* Other */
    76. 

  76.     code span.pp { color: #bc7a00; } /* Preprocessor */
    77. 

  77.     code span.sc { color: #4070a0; } /* SpecialChar */
    78. 

  78.     code span.ss { color: #bb6688; } /* SpecialString */
    79. 

  79.     code span.st { color: #4070a0; } /* String */
    80. 

  80.     code span.va { color: #19177c; } /* Variable */
    81. 

  81.     code span.vs { color: #4070a0; } /* VerbatimString */
    82. 

  82.     code span.wa { color: #60a0b0; font-weight: bold; font-style: italic; } /* Warning */
    83. 

  83.     .display.math{display: block; text-align: center; margin: 0.5rem auto;}
    84. 

  84.   </style>
    85. 

  85.   <link rel="stylesheet" href="./reveal.js/dist/theme/night.css" id="theme">
    86. 

  86.   <link rel="stylesheet" href="./css/custom.css"/>
    87. 

  87. </head>
    88. 

  88. <body>
    89. 

  89.   <div class="reveal">
    90. 

  90.     <div class="slides">
    91. 

  91. 

  92. <section id="title-slide">
    93. 

  93.   <h1 class="title">CPA Angriff auf Speck</h1>
    94. 

  94.   <p class="author">Robin Dietrich &amp; Marius Schwarz</p>
    95. 

  95. </section>
    96. 

  96. 

  97. <section id="agenda" class="slide level1">
    98. 

  98. <h1>Agenda</h1>
    99. 

  99. <ul>
    100. 

  100. <li>Speck Chiffre</li>
    101. 

  101. <li>CPA Angriffe</li>
    102. 

  102. <li>CPA auf Speck</li>
    103. 

  103. <li>Gegenmaßnahmen</li>
    104. 

  104. <li>Hiding</li>
    105. 

  105. </ul>
    106. 

  106. </section>
    107. 

  107. <section id="speck" class="slide level1">
    108. 

  108. <h1>Speck</h1>
    109. 

  109. <ul>
    110. 

  110. <li>Symmentrische ARX Chiffre
    111. 

  111. <ul>
    112. 

  112. <li>Add/Rotate/XOR</li>
    113. 

  113. <li>Effizient und einfach umzusetzen</li>
    114. 

  114. </ul></li>
    115. 

  115. <li>Entworfen von der NSA (Zusammen mit der Chiffre Simon)</li>
    116. 

  116. <li>Performant in Hard-/Software</li>
    117. 

  117. <li>Speck bietet mehrere mögliche Modis
    118. 

  118. <ul>
    119. 

  119. <li>Anzahl Runden, Schlüssellänge, Blocklänge</li>
    120. 

  120. </ul></li>
    121. 

  121. <li>Paper: <a href="https://csrc.nist.gov/csrc/media/events/lightweight-cryptography-workshop-2015/documents/papers/session1-shors-paper.pdf">Simon and Speck: Block Ciphers for the Internet of Things</a></li>
    122. 

  122. </ul>
    123. 

  123. </section>
    124. 

  124. <section id="speck---setups" class="slide level1">
    125. 

  125. <h1>Speck - Setups</h1>
    126. 

  126. <table>
    127. 

  127. <thead>
    128. 

  128. <tr class="header">
    129. 

  129. <th>Speck</th>
    130. 

  130. <th>Blocklänge</th>
    131. 

  131. <th>Schlüssellänge</th>
    132. 

  132. <th>Runden</th>
    133. 

  133. </tr>
    134. 

  134. </thead>
    135. 

  135. <tbody>
    136. 

  136. <tr class="odd">
    137. 

  137. <td><span style="color:#d08a1d"><strong>Speck3264</strong></span></td>
    138. 

  138. <td><span style="color:#d08a1d"><strong>32 Bit</strong></span></td>
    139. 

  139. <td><span style="color:#d08a1d"><strong>64 Bit</strong></span></td>
    140. 

  140. <td><span style="color:#d08a1d"><strong>22</strong></span></td>
    141. 

  141. </tr>
    142. 

  142. <tr class="even">
    143. 

  143. <td>Speck4872</td>
    144. 

  144. <td>48 Bit</td>
    145. 

  145. <td>72 Bit</td>
    146. 

  146. <td>22</td>
    147. 

  147. </tr>
    148. 

  148. <tr class="odd">
    149. 

  149. <td>Speck4896</td>
    150. 

  150. <td>48 Bit</td>
    151. 

  151. <td>96 Bit</td>
    152. 

  152. <td>23</td>
    153. 

  153. </tr>
    154. 

  154. <tr class="even">
    155. 

  155. <td>Speck6496</td>
    156. 

  156. <td>64 Bit</td>
    157. 

  157. <td>96 Bit</td>
    158. 

  158. <td>26</td>
    159. 

  159. </tr>
    160. 

  160. <tr class="odd">
    161. 

  161. <td>Speck64128</td>
    162. 

  162. <td>64 Bit</td>
    163. 

  163. <td>128 Bit</td>
    164. 

  164. <td>27</td>
    165. 

  165. </tr>
    166. 

  166. <tr class="even">
    167. 

  167. <td>Speck9696</td>
    168. 

  168. <td>96 Bit</td>
    169. 

  169. <td>96 Bit</td>
    170. 

  170. <td>28</td>
    171. 

  171. </tr>
    172. 

  172. <tr class="odd">
    173. 

  173. <td>Speck96144</td>
    174. 

  174. <td>96 Bit</td>
    175. 

  175. <td>144 Bit</td>
    176. 

  176. <td>29</td>
    177. 

  177. </tr>
    178. 

  178. <tr class="even">
    179. 

  179. <td>Speck128128</td>
    180. 

  180. <td>128 Bit</td>
    181. 

  181. <td>128 Bit</td>
    182. 

  182. <td>32</td>
    183. 

  183. </tr>
    184. 

  184. <tr class="odd">
    185. 

  185. <td>Speck128192</td>
    186. 

  186. <td>128 Bit</td>
    187. 

  187. <td>192 Bit</td>
    188. 

  188. <td>33</td>
    189. 

  189. </tr>
    190. 

  190. <tr class="even">
    191. 

  191. <td>Speck1281256</td>
    192. 

  192. <td>128 Bit</td>
    193. 

  193. <td>256 Bit</td>
    194. 

  194. <td>34</td>
    195. 

  195. </tr>
    196. 

  196. </tbody>
    197. 

  197. </table>
    198. 

  198. </section>
    199. 

  199. <section id="speck---rundenfunktion" class="slide level1">
    200. 

  200. <h1>Speck - Rundenfunktion</h1>
    201. 

  201. <p><img data-src="img/rundenfunktion.png" width="400" /></p>
    202. 

  202. <ul>
    203. 

  203. <li>Wird für die Generierung des Rundenschlüssels aufgerufen</li>
    204. 

  204. <li>Wird bei der Verschlüsselung des Klartextes aufgerufen</li>
    205. 

  205. <li>Arbeitet auf zwei geteiltem Input</li>
    206. 

  206. </ul>
    207. 

  207. </section>
    208. 

  208. <section id="speck---pseudocode" class="slide level1">
    209. 

  209. <h1>Speck - Pseudocode</h1>
    210. 

  210. <div class="sourceCode" id="cb1"><pre class="sourceCode c"><code class="sourceCode c"><span id="cb1-1"><a href="#cb1-1" aria-hidden="true" tabindex="-1"></a>pt <span class="op">=</span> Plaintext Bytes              Pt <span class="op">=</span> Plaintext as <span class="dv">16</span> Bit Words</span>
    211. 

  211. <span id="cb1-2"><a href="#cb1-2" aria-hidden="true" tabindex="-1"></a>ct <span class="op">=</span> Ciphertext Bytes             Ct <span class="op">=</span> Ciphertext as <span class="dv">16</span> Bit Words</span>
    212. 

  212. <span id="cb1-3"><a href="#cb1-3" aria-hidden="true" tabindex="-1"></a>k <span class="op">=</span> Key as Bytes                  K <span class="op">=</span> Key as <span class="dv">16</span> Bit Words</span>
    213. 

  213. <span id="cb1-4"><a href="#cb1-4" aria-hidden="true" tabindex="-1"></a></span>
    214. 

  214. <span id="cb1-5"><a href="#cb1-5" aria-hidden="true" tabindex="-1"></a><span class="co">// Key Schedule</span></span>
    215. 

  215. <span id="cb1-6"><a href="#cb1-6" aria-hidden="true" tabindex="-1"></a>D<span class="op">=</span>K<span class="op">[</span><span class="dv">3</span><span class="op">],</span> C<span class="op">=</span>K<span class="op">[</span><span class="dv">2</span><span class="op">],</span> B<span class="op">=</span>K<span class="op">[</span><span class="dv">1</span><span class="op">],</span> A<span class="op">=</span>K<span class="op">[</span><span class="dv">0</span><span class="op">]</span></span>
    216. 

  216. <span id="cb1-7"><a href="#cb1-7" aria-hidden="true" tabindex="-1"></a></span>
    217. 

  217. <span id="cb1-8"><a href="#cb1-8" aria-hidden="true" tabindex="-1"></a><span class="cf">for</span> i in <span class="fl">0.</span><span class="er">.</span><span class="op">&lt;</span><span class="dv">22</span></span>
    218. 

  218. <span id="cb1-9"><a href="#cb1-9" aria-hidden="true" tabindex="-1"></a>    rk<span class="op">[</span>i<span class="op">]=</span>A</span>
    219. 

  219. <span id="cb1-10"><a href="#cb1-10" aria-hidden="true" tabindex="-1"></a>    ER16<span class="op">(</span>B<span class="op">,</span> A<span class="op">,</span> i<span class="op">++)</span></span>
    220. 

  220. <span id="cb1-11"><a href="#cb1-11" aria-hidden="true" tabindex="-1"></a>    rk<span class="op">[</span>i<span class="op">]=</span>A</span>
    221. 

  221. <span id="cb1-12"><a href="#cb1-12" aria-hidden="true" tabindex="-1"></a>    ER16<span class="op">(</span>C<span class="op">,</span> A<span class="op">,</span> i<span class="op">++)</span></span>
    222. 

  222. <span id="cb1-13"><a href="#cb1-13" aria-hidden="true" tabindex="-1"></a>    rk<span class="op">[</span>i<span class="op">]=</span>A</span>
    223. 

  223. <span id="cb1-14"><a href="#cb1-14" aria-hidden="true" tabindex="-1"></a>    ER16<span class="op">(</span>D<span class="op">,</span> A<span class="op">,</span> i<span class="op">++)</span></span>
    224. 

  224. <span id="cb1-15"><a href="#cb1-15" aria-hidden="true" tabindex="-1"></a></span>
    225. 

  225. <span id="cb1-16"><a href="#cb1-16" aria-hidden="true" tabindex="-1"></a><span class="co">// Encryption</span></span>
    226. 

  226. <span id="cb1-17"><a href="#cb1-17" aria-hidden="true" tabindex="-1"></a>Ct<span class="op">[</span><span class="dv">0</span><span class="op">]=</span>Pt<span class="op">[</span><span class="dv">0</span><span class="op">];</span> Ct<span class="op">[</span><span class="dv">1</span><span class="op">]=</span>Pt<span class="op">[</span><span class="dv">1</span><span class="op">];</span></span>
    227. 

  227. <span id="cb1-18"><a href="#cb1-18" aria-hidden="true" tabindex="-1"></a></span>
    228. 

  228. <span id="cb1-19"><a href="#cb1-19" aria-hidden="true" tabindex="-1"></a><span class="cf">for</span> i in <span class="fl">0.</span><span class="er">.</span><span class="op">&lt;</span><span class="dv">22</span></span>
    229. 

  229. <span id="cb1-20"><a href="#cb1-20" aria-hidden="true" tabindex="-1"></a>    ER16<span class="op">(</span>Ct<span class="op">[</span><span class="dv">1</span><span class="op">],</span> Ct<span class="op">[</span><span class="dv">0</span><span class="op">],</span> rk<span class="op">[</span>i<span class="op">++])</span></span></code></pre></div>
    230. 

  230. </section>
    231. 

  231. <section id="speck---möglicher-angriff" class="slide level1">
    232. 

  232. <h1>Speck - Möglicher Angriff</h1>
    233. 

  233. <ul>
    234. 

  234. <li>Angriff der Rundenfunktion</li>
    235. 

  235. <li>ADD/XOR/ROT Operationen</li>
    236. 

  236. </ul>
    237. 

  237. <div class="sourceCode" id="cb2"><pre class="sourceCode c"><code class="sourceCode c"><span id="cb2-1"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a><span class="dt">void</span> FuncER16<span class="op">(</span>u16 <span class="op">*</span>x<span class="op">,</span> u16 <span class="op">*</span>y<span class="op">,</span> u16 k<span class="op">)</span></span>
    238. 

  238. <span id="cb2-2"><a href="#cb2-2" aria-hidden="true" tabindex="-1"></a><span class="op">{</span></span>
    239. 

  239. <span id="cb2-3"><a href="#cb2-3" aria-hidden="true" tabindex="-1"></a>    u16 tmp_x <span class="op">=</span> <span class="op">*</span>x<span class="op">;</span></span>
    240. 

  240. <span id="cb2-4"><a href="#cb2-4" aria-hidden="true" tabindex="-1"></a>    u16 tmp_y <span class="op">=</span> <span class="op">*</span>y<span class="op">;</span></span>
    241. 

  241. <span id="cb2-5"><a href="#cb2-5" aria-hidden="true" tabindex="-1"></a></span>
    242. 

  242. <span id="cb2-6"><a href="#cb2-6" aria-hidden="true" tabindex="-1"></a>    <span class="op">*</span>x <span class="op">=</span> <span class="op">(((</span>tmp_x<span class="op">)&gt;&gt;(</span><span class="dv">7</span><span class="op">))</span> <span class="op">|</span> <span class="op">((</span>tmp_x<span class="op">)&lt;&lt;(</span><span class="dv">16</span><span class="op">-(</span><span class="dv">7</span><span class="op">))));</span>  <span class="co">// ROR(7)</span></span>
    243. 

  243. <span id="cb2-7"><a href="#cb2-7" aria-hidden="true" tabindex="-1"></a>    <span class="op">*</span>x <span class="op">+=</span> <span class="op">*</span>y<span class="op">;</span></span>
    244. 

  244. <span id="cb2-8"><a href="#cb2-8" aria-hidden="true" tabindex="-1"></a></span>
    245. 

  245. <span id="cb2-9"><a href="#cb2-9" aria-hidden="true" tabindex="-1"></a>    <span class="op">*</span>x <span class="op">=</span> <span class="op">*</span>x <span class="op">^</span> k<span class="op">;</span></span>
    246. 

  246. <span id="cb2-10"><a href="#cb2-10" aria-hidden="true" tabindex="-1"></a></span>
    247. 

  247. <span id="cb2-11"><a href="#cb2-11" aria-hidden="true" tabindex="-1"></a>    <span class="op">*</span>y <span class="op">=</span> <span class="op">(((</span>tmp_y<span class="op">)&lt;&lt;(</span><span class="dv">2</span><span class="op">))</span> <span class="op">|</span> <span class="op">(</span>tmp_y<span class="op">&gt;&gt;(</span><span class="dv">16</span><span class="op">-(</span><span class="dv">2</span><span class="op">))));</span>   <span class="co">// ROL(2)</span></span>
    248. 

  248. <span id="cb2-12"><a href="#cb2-12" aria-hidden="true" tabindex="-1"></a>    <span class="op">*</span>y <span class="op">=</span> <span class="op">*</span>y <span class="op">^</span> <span class="op">*</span>x<span class="op">;</span></span>
    249. 

  249. <span id="cb2-13"><a href="#cb2-13" aria-hidden="true" tabindex="-1"></a><span class="op">}</span></span></code></pre></div>
    250. 

  250. </section>
    251. 

  251. <section id="speck---möglicher-angriff-1" class="slide level1">
    252. 

  252. <h1>Speck - Möglicher Angriff</h1>
    253. 

  253. <ul>
    254. 

  254. <li>Der Rundenschlüssel steckt in der XOR Operation:</li>
    255. 

  255. </ul>
    256. 

  256. <p><img data-src="img/er16_enc_rk.png" /> <img data-src="img/er16_annot.png" /></p>
    257. 

  257. </section>
    258. 

  258. <section id="correlation-power-analysis" class="slide level1">
    259. 

  259. <h1>Correlation Power Analysis</h1>
    260. 

  260. <ul>
    261. 

  261. <li>Variante von Differential Power Analysis (DPA)</li>
    262. 

  262. <li>Nutzt Pearson Correlation Coefficient (PCC)</li>
    263. 

  263. <li><strong>Bei Speck:</strong> Korrelation zwischen Power-Trace und Rundenschlüssel</li>
    264. 

  264. <li>Vorgehen:
    265. 

  265. <ul>
    266. 

  266. <li>Modell erstellen</li>
    267. 

  267. <li>Finden der Korrelationen im Modell</li>
    268. 

  268. <li>Anwenden auf Hardware Implementierung</li>
    269. 

  269. </ul></li>
    270. 

  270. </ul>
    271. 

  271. </section>
    272. 

  272. <section id="hamming-weight" class="slide level1">
    273. 

  273. <h1>Hamming Weight</h1>
    274. 

  274. <ul>
    275. 

  275. <li>Passendes Modell zum ‘bewerten’ des Stromverbrauchs</li>
    276. 

  276. <li>Chip hat ein gewissen Basisverbrauch (IDLE)</li>
    277. 

  277. <li>Werden Bytes im Chip verändert (<span class="math inline">0 → 1; 1 → 0</span>), wird Strom benötigt</li>
    278. 

  278. <li>Verhalten kann durch die Hamming-Distanz simuliert werden</li>
    279. 

  279. <li><strong>Hamming Distanz:</strong> Anzahl der veränderten Bits:</li>
    280. 

  280. </ul>
    281. 

  281. <p><span class="math display"><em>H</em><em>D</em>(0100101,0010101) = 2</span></p>
    282. 

  282. <p>Der Unterschied zweier per XOR verknüpfter Daten, wird als Hamming-Gewicht bezeichnet:</p>
    283. 

  283. <p><span class="math display"><em>H</em><em>a</em><em>m</em><em>m</em><em>i</em><em>n</em><em>g</em><em>D</em><em>i</em><em>s</em><em>t</em><em>a</em><em>n</em><em>c</em><em>e</em>(0100101,0010101) = <em>H</em><em>a</em><em>m</em><em>m</em><em>i</em><em>n</em><em>g</em><em>W</em><em>e</em><em>i</em><em>g</em><em>h</em><em>t</em>(0100101⊕0010101)</span></p>
    284. 

  284. </section>
    285. 

  285. <section id="speck---modell" class="slide level1">
    286. 

  286. <h1>Speck - Modell</h1>
    287. 

  287. <ul>
    288. 

  288. <li>Einfaches Modell der Speck Verschlüsselung</li>
    289. 

  289. <li>Kann für die ersten 2 Byte des Rundenschlüssels genutzt werden:</li>
    290. 

  290. </ul>
    291. 

  291. <div class="sourceCode" id="cb3"><pre class="sourceCode python"><code class="sourceCode python"><span id="cb3-1"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a><span class="kw">def</span> simple_speck(plaintext, key):</span>
    292. 

  292. <span id="cb3-2"><a href="#cb3-2" aria-hidden="true" tabindex="-1"></a>    Ct_0 <span class="op">=</span> (<span class="bu">int</span>(plaintext[<span class="dv">1</span>]) <span class="op">&lt;&lt;</span> <span class="dv">8</span>) <span class="op">+</span> <span class="bu">int</span>(plaintext[<span class="dv">0</span>]) <span class="co"># RIGHT Key</span></span>
    293. 

  293. <span id="cb3-3"><a href="#cb3-3" aria-hidden="true" tabindex="-1"></a>    Ct_1 <span class="op">=</span> (<span class="bu">int</span>(plaintext[<span class="dv">3</span>]) <span class="op">&lt;&lt;</span> <span class="dv">8</span>) <span class="op">+</span> <span class="bu">int</span>(plaintext[<span class="dv">2</span>]) <span class="co"># LEFT Key</span></span>
    294. 

  294. <span id="cb3-4"><a href="#cb3-4" aria-hidden="true" tabindex="-1"></a></span>
    295. 

  295. <span id="cb3-5"><a href="#cb3-5" aria-hidden="true" tabindex="-1"></a>    Ct_1, Ct_0 <span class="op">=</span> ER16(Ct_1, Ct_0, key)     <span class="co"># Calculate Roundfunction</span></span>
    296. 

  296. <span id="cb3-6"><a href="#cb3-6" aria-hidden="true" tabindex="-1"></a></span>
    297. 

  297. <span id="cb3-7"><a href="#cb3-7" aria-hidden="true" tabindex="-1"></a>    <span class="cf">return</span> popcount((Ct_1 <span class="op">&lt;&lt;</span> <span class="dv">8</span>) <span class="op">+</span> Ct_0)    <span class="co"># Return Hamming Weight (aka Popcount)</span></span></code></pre></div>
    298. 

  298. </section>
    299. 

  299. <section id="speck---simulation" class="slide level1">
    300. 

  300. <h1>Speck - Simulation</h1>
    301. 

  301. <ol type="1">
    302. 

  302. <li>Simulation anhand des Modells mit <span class="math inline"><em>n</em></span> traces</li>
    303. 

  303. <li>Generieren von <span class="math inline"><em>n</em></span> zufälligen Klartexten mit <strong>fixem</strong> Keybyte (+ noise)</li>
    304. 

  304. <li>Simulation aller möglichen Keybytes per Hamming Weight</li>
    305. 

  305. <li>Berechnen des PCC aller Keys über alle traces</li>
    306. 

  306. </ol>
    307. 

  307. <p><img data-src="img/simulation_corr.png" /></p>
    308. 

  308. <p><span class="math inline">→</span> Das korrekte Keybyte ist: 0x68</p>
    309. 

  309. </section>
    310. 

  310. <section id="angriff---hardware" class="slide level1">
    311. 

  311. <h1>Angriff - Hardware</h1>
    312. 

  312. <ol type="1">
    313. 

  313. <li>Implementierung von Speck auf CW</li>
    314. 

  314. <li>Aufzeichnen von <span class="math inline"><em>n</em></span> Power Traces</li>
    315. 

  315. <li>Leakage Test</li>
    316. 

  316. <li>Berechnung des Software Modells</li>
    317. 

  317. <li>Berechnen der Korrelationen zwischen Modell/Powertraces
    318. 

  318. <ul>
    319. 

  319. <li>Keybyte für Keybyte</li>
    320. 

  320. <li>Rückrechnen des Rundenschlüssels</li>
    321. 

  321. </ul></li>
    322. 

  322. </ol>
    323. 

  323. </section>
    324. 

  324. <section id="t-test" class="slide level1">
    325. 

  325. <h1>T-Test</h1>
    326. 

  326. <ul>
    327. 

  327. <li>Kann verwendet werden, um <em>Leakage</em> zu erkennen
    328. 

  328. <ul>
    329. 

  329. <li>Gibt das Berechnen einer Chiffre mehr Information zurück als geplant: Leakage</li>
    330. 

  330. <li>Ausnutzbar z.B. durch die Power Traces</li>
    331. 

  331. </ul></li>
    332. 

  332. <li>Berechnet durch:</li>
    333. 

  333. </ul>
    334. 

  334. <p><img data-src="img/ttest_calc.png" /></p>
    335. 

  335. <ul>
    336. 

  336. <li>Vergleicht zwei unabhängige Stichproben miteinander</li>
    337. 

  337. <li>Je unterschiedlicher die Mittelwerte <span class="math inline">→</span> desto mehr Leakage</li>
    338. 

  338. </ul>
    339. 

  339. </section>
    340. 

  340. <section id="t-test-1" class="slide level1">
    341. 

  341. <h1>T-Test</h1>
    342. 

  342. <ul>
    343. 

  343. <li>T-Test der aufgezeichneten Power-Traces:</li>
    344. 

  344. </ul>
    345. 

  345. <p><img data-src="img/t_test_original.png" /></p>
    346. 

  346. <ul>
    347. 

  347. <li>Erkennbar, dass Leakage vorhanden sein muss</li>
    348. 

  348. </ul>
    349. 

  349. </section>
    350. 

  350. <section id="korrelationen-des-ersten-keybytes" class="slide level1">
    351. 

  351. <h1>Korrelationen des ersten Keybytes</h1>
    352. 

  352. <ul>
    353. 

  353. <li>Korrelationen des ersten Keybytes</li>
    354. 

  354. <li>Korrelation fällt höher aus als im Modell</li>
    355. 

  355. <li>Deutliches Maximum der Korrelation bei 0x22 (Korrektes Keybyte)</li>
    356. 

  356. </ul>
    357. 

  357. <p><img data-src="img/correlation_first_keybyte.png" width="550" /></p>
    358. 

  358. </section>
    359. 

  359. <section id="problem-blocksize" class="slide level1">
    360. 

  360. <h1>Problem: Blocksize</h1>
    361. 

  361. <ul>
    362. 

  362. <li>Bei <strong>Speck3264:</strong> Operationen nicht auf Byte, sondern auf 16-Bit Ebene</li>
    363. 

  363. <li>Erste Idee: Modell und Korrelation auf <span class="math inline">2<sup>16</sup></span> Keys</li>
    364. 

  364. <li><span class="math inline">→</span> Keyspace ist abdeckbar (65536 Keys)</li>
    365. 

  365. <li><span class="math inline">→</span> Zu langsam</li>
    366. 

  366. <li><span class="math inline">→</span> Nicht möglich für andere Modis von Speck (32 Bit Subkeys)</li>
    367. 

  367. <li><strong>Lösung:</strong> Modell funktioniert auch auf allen Teilbytes per Shift:</li>
    368. 

  368. </ul>
    369. 

  369. <div class="sourceCode" id="cb4"><pre class="sourceCode python"><code class="sourceCode python"><span id="cb4-1"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a>rightkey <span class="op">=</span> <span class="bn">0x00</span></span>
    370. 

  370. <span id="cb4-2"><a href="#cb4-2" aria-hidden="true" tabindex="-1"></a><span class="cf">for</span> guess_key <span class="kw">in</span> <span class="bu">range</span>(<span class="dv">256</span>):</span>
    371. 

  371. <span id="cb4-3"><a href="#cb4-3" aria-hidden="true" tabindex="-1"></a>    leftkey <span class="op">=</span> model( (guess_key <span class="op">&lt;&lt;</span> <span class="dv">8</span>) <span class="op">+</span> righkey )</span>
    372. 

  372. <span id="cb4-4"><a href="#cb4-4" aria-hidden="true" tabindex="-1"></a></span>
    373. 

  373. <span id="cb4-5"><a href="#cb4-5" aria-hidden="true" tabindex="-1"></a><span class="cf">for</span> guess_key <span class="kw">in</span> <span class="bu">range</span>(<span class="dv">256</span>):</span>
    374. 

  374. <span id="cb4-6"><a href="#cb4-6" aria-hidden="true" tabindex="-1"></a>    rightkey <span class="op">=</span> model( (leftkey <span class="op">&lt;&lt;</span> <span class="dv">8</span>) <span class="op">+</span> guess_key )</span></code></pre></div>
    375. 

  375. <ul>
    376. 

  376. <li>Auch umsetzbar auf Speck mit Blocksize &gt; 16 Bit</li>
    377. 

  377. </ul>
    378. 

  378. </section>
    379. 

  379. <section id="problem-nth-keybytes" class="slide level1">
    380. 

  380. <h1>Problem: <span class="math inline"><em>n</em><sup><em>t</em><em>h</em></sup></span> Keybytes</h1>
    381. 

  381. <ul>
    382. 

  382. <li>Modell kann nur für die ersten zwei Keybytes genutzt werden, da:</li>
    383. 

  383. </ul>
    384. 

  384. <div class="sourceCode" id="cb5"><pre class="sourceCode c"><code class="sourceCode c"><span id="cb5-1"><a href="#cb5-1" aria-hidden="true" tabindex="-1"></a><span class="cf">for</span> i in <span class="fl">0.</span><span class="er">.</span><span class="op">&lt;</span><span class="dv">22</span></span>
    385. 

  385. <span id="cb5-2"><a href="#cb5-2" aria-hidden="true" tabindex="-1"></a>    ER16<span class="op">(</span>Ct<span class="op">[</span><span class="dv">1</span><span class="op">],</span> Ct<span class="op">[</span><span class="dv">0</span><span class="op">],</span> rk<span class="op">[</span>i<span class="op">++])</span></span></code></pre></div>
    386. 

  386. <ul>
    387. 

  387. <li>Die bereits bekannten Rundenschlüssel müssen mit eingeschlossen werden</li>
    388. 

  388. <li>Muss an der richtigen Stelle passieren (<span class="math inline">⊕</span>-Operation)</li>
    389. 

  389. </ul>
    390. 

  390. </section>
    391. 

  391. <section id="problem-nth-keybytes-1" class="slide level1">
    392. 

  392. <h1>Problem: <span class="math inline"><em>n</em><sup><em>t</em><em>h</em></sup></span> Keybytes</h1>
    393. 

  393. <ul>
    394. 

  394. <li>Anpassung des Modells:</li>
    395. 

  395. </ul>
    396. 

  396. <div class="sourceCode" id="cb6"><pre class="sourceCode python"><code class="sourceCode python"><span id="cb6-1"><a href="#cb6-1" aria-hidden="true" tabindex="-1"></a> <span class="co"># -------------- for one key -----------------#</span></span>
    397. 

  397. <span id="cb6-2"><a href="#cb6-2" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> ((x <span class="op">&lt;&lt;</span> (<span class="dv">16</span> <span class="op">-</span> ALPHA)) <span class="op">+</span> (x <span class="op">&gt;&gt;</span> ALPHA)) <span class="op">&amp;</span> mod_mask           <span class="co"># x = ROR(x, 7)</span></span>
    398. 

  398. <span id="cb6-3"><a href="#cb6-3" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> (x <span class="op">+</span> y) <span class="op">&amp;</span> mod_mask                                        <span class="co"># x = ADD(x, y)</span></span>
    399. 

  399. <span id="cb6-4"><a href="#cb6-4" aria-hidden="true" tabindex="-1"></a></span>
    400. 

  400. <span id="cb6-5"><a href="#cb6-5" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> x <span class="op">^</span> knownkey[<span class="dv">0</span>]</span>
    401. 

  401. <span id="cb6-6"><a href="#cb6-6" aria-hidden="true" tabindex="-1"></a></span>
    402. 

  402. <span id="cb6-7"><a href="#cb6-7" aria-hidden="true" tabindex="-1"></a>    <span class="co"># -------------- for second key -----------------#</span></span>
    403. 

  403. <span id="cb6-8"><a href="#cb6-8" aria-hidden="true" tabindex="-1"></a></span>
    404. 

  404. <span id="cb6-9"><a href="#cb6-9" aria-hidden="true" tabindex="-1"></a>    y <span class="op">=</span> ((y <span class="op">&gt;&gt;</span> (<span class="dv">16</span> <span class="op">-</span> BETA)) <span class="op">+</span> (y <span class="op">&lt;&lt;</span> BETA)) <span class="op">&amp;</span> mod_mask            <span class="co"># y = ROL(y, 2)</span></span>
    405. 

  405. <span id="cb6-10"><a href="#cb6-10" aria-hidden="true" tabindex="-1"></a>    y <span class="op">=</span> y <span class="op">^</span> x                                                    <span class="co"># y = XOR(y, x)</span></span>
    406. 

  406. <span id="cb6-11"><a href="#cb6-11" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> ((x <span class="op">&lt;&lt;</span> (<span class="dv">16</span> <span class="op">-</span> ALPHA)) <span class="op">+</span> (x <span class="op">&gt;&gt;</span> ALPHA)) <span class="op">&amp;</span> mod_mask          <span class="co"># x = ROR(x, 7)</span></span>
    407. 

  407. <span id="cb6-12"><a href="#cb6-12" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> (x <span class="op">+</span> y) <span class="op">&amp;</span> mod_mask                                       <span class="co"># x = ADD(x, y)</span></span>
    408. 

  408. <span id="cb6-13"><a href="#cb6-13" aria-hidden="true" tabindex="-1"></a></span>
    409. 

  409. <span id="cb6-14"><a href="#cb6-14" aria-hidden="true" tabindex="-1"></a>    x <span class="op">=</span> x <span class="op">^</span> knownkey[<span class="dv">1</span>]                                          <span class="co"># x = XOR(x, k)</span></span>
    410. 

  410. <span id="cb6-15"><a href="#cb6-15" aria-hidden="true" tabindex="-1"></a></span>
    411. 

  411. <span id="cb6-16"><a href="#cb6-16" aria-hidden="true" tabindex="-1"></a>    <span class="co"># -------------- for third key -----------------#</span></span>
    412. 

  412. <span id="cb6-17"><a href="#cb6-17" aria-hidden="true" tabindex="-1"></a>    <span class="co"># [...]</span></span></code></pre></div>
    413. 

  413. </section>
    414. 

  414. <section id="korrelationen-des-ersten-keybytes-1" class="slide level1">
    415. 

  415. <h1>Korrelationen des ersten Keybytes</h1>
    416. 

  416. <ul>
    417. 

  417. <li>Graph zeigt die Korrelationen des ersten Keybytes bis 5000 traces</li>
    418. 

  418. <li>Ab ~800 Traces hebt sich die Korrelation deutlich hervor</li>
    419. 

  419. </ul>
    420. 

  420. <p><img data-src="img/traces.png" width="550" /></p>
    421. 

  421. </section>
    422. 

  422. <section id="gegenmaßnahmen" class="slide level1">
    423. 

  423. <h1>Gegenmaßnahmen</h1>
    424. 

  424. </section>
    425. 

  425. <section id="hiding" class="slide level1">
    426. 

  426. <h1>Hiding</h1>
    427. 

  427. <ul>
    428. 

  428. <li>Verstecken des eigentlichen “Leakages” in Rauschen</li>
    429. 

  429. <li><span class="math inline">→</span> Erhöhung des vorhandenen Rauschens während der Berechnung</li>
    430. 

  430. <li>Mehrere Möglichkeiten
    431. 

  431. <ul>
    432. 

  432. <li>Mischen der Instruction-Order</li>
    433. 

  433. <li><strong>Hinzufügen von “Dummy Instructionen”</strong></li>
    434. 

  434. <li>Clock Jitter</li>
    435. 

  435. </ul></li>
    436. 

  436. </ul>
    437. 

  437. </section>
    438. 

  438. <section id="hiding---code" class="slide level1">
    439. 

  439. <h1>Hiding - Code</h1>
    440. 

  440. <ul>
    441. 

  441. <li><strong>Ansatz:</strong> Korrelation kommt von <code>ER16()</code>
    442. 

  442. <ul>
    443. 

  443. <li>Add/XOR/Rotate</li>
    444. 

  444. </ul></li>
    445. 

  445. <li>Hinzufügen weitere AXR Operationen um noise zu erhöhen</li>
    446. 

  446. <li>Ersetzen von jeder XOR Operation mit folgender Implementierung:</li>
    447. 

  447. </ul>
    448. 

  448. <div class="sourceCode" id="cb7"><pre class="sourceCode c"><code class="sourceCode c"><span id="cb7-1"><a href="#cb7-1" aria-hidden="true" tabindex="-1"></a><span class="dt">uint16_t</span> XOR<span class="op">(</span><span class="dt">uint16_t</span> a<span class="op">,</span> <span class="dt">uint16_t</span> b<span class="op">,</span> <span class="dt">int</span> random<span class="op">)</span> <span class="op">{</span></span>
    449. 

  449. <span id="cb7-2"><a href="#cb7-2" aria-hidden="true" tabindex="-1"></a>    <span class="dt">uint8_t</span> tmp <span class="op">=</span> random <span class="op">^</span> <span class="bn">0x5F</span><span class="op">;</span></span>
    450. 

  450. <span id="cb7-3"><a href="#cb7-3" aria-hidden="true" tabindex="-1"></a>    tmp <span class="op">^=</span> <span class="op">(</span>random <span class="op">^</span> a<span class="op">);</span></span>
    451. 

  451. <span id="cb7-4"><a href="#cb7-4" aria-hidden="true" tabindex="-1"></a>    tmp <span class="op">^=</span> <span class="op">(</span>tmp <span class="op">^</span> b<span class="op">);</span></span>
    452. 

  452. <span id="cb7-5"><a href="#cb7-5" aria-hidden="true" tabindex="-1"></a>    tmp <span class="op">&amp;=</span> <span class="op">(</span>tmp <span class="op">&amp;</span> a<span class="op">);</span></span>
    453. 

  453. <span id="cb7-6"><a href="#cb7-6" aria-hidden="true" tabindex="-1"></a>    tmp <span class="op">&amp;=</span> <span class="op">(</span>tmp <span class="op">&amp;</span> b<span class="op">);</span></span>
    454. 

  454. <span id="cb7-7"><a href="#cb7-7" aria-hidden="true" tabindex="-1"></a>    <span class="cf">return</span> a <span class="op">^</span> b<span class="op">;</span></span>
    455. 

  455. <span id="cb7-8"><a href="#cb7-8" aria-hidden="true" tabindex="-1"></a><span class="op">}</span></span></code></pre></div>
    456. 

  456. <ul>
    457. 

  457. <li><code>Random</code> wird bei jeder Verschlüsslung erneut generiert</li>
    458. 

  458. </ul>
    459. 

  459. </section>
    460. 

  460. <section id="hiding---t-test" class="slide level1">
    461. 

  461. <h1>Hiding - T-Test</h1>
    462. 

  462. <ul>
    463. 

  463. <li>Ergebnisse des T-Tests mit implementierter Hiding Maßnahmen:</li>
    464. 

  464. </ul>
    465. 

  465. <p><img data-src="img/t_test_hiding_random.png" /></p>
    466. 

  466. <ul>
    467. 

  467. <li>Bedarf weiterer Analysen, denn Unterschiede der beiden T-Tests sind nur minimal</li>
    468. 

  468. <li>Laut T-Test <strong>keine</strong> Indikation dass Hiding funktioniert</li>
    469. 

  469. </ul>
    470. 

  470. </section>
    471. 

  471. <section id="korrelationen-des-ersten-keybytes-2" class="slide level1">
    472. 

  472. <h1>Korrelationen des ersten Keybytes</h1>
    473. 

  473. <ul>
    474. 

  474. <li>Besseres Ergebnis der Korrelationen bis 5000 Traces</li>
    475. 

  475. <li>Korrelationen flachen ab ~800 drastisch ab</li>
    476. 

  476. <li>Keine Korrelation sticht heraus</li>
    477. 

  477. </ul>
    478. 

  478. <p><img data-src="img/corr_traces_hiding_5k.png" width="550" /></p>
    479. 

  479. <ul>
    480. 

  480. <li>Es war nicht möglich den Angriff erneut durchzuführen</li>
    481. 

  481. <li>Neue Korrelationen nach einigen Tests lediglich bei ~0.18 mit falschem Keybyte</li>
    482. 

  482. <li><span class="math inline">→</span> Maßnahme ist erfolgreich</li>
    483. 

  483. </ul>
    484. 

  484. </section>
    485. 

  485. <section id="hiding-potentieller-bypass" class="slide level1">
    486. 

  486. <h1>Hiding (potentieller) Bypass</h1>
    487. 

  487. <ul>
    488. 

  488. <li>Korrelation sollte weiterhin möglich sein, wenn die Operationen in Betracht gezogen werden</li>
    489. 

  489. <li>Schwierigkeit hängt am Zufallszahlengenerator</li>
    490. 

  490. <li><strong>Problem:</strong> Sichere Zufallszahlen auf Embedded Chips sind nicht trivial</li>
    491. 

  491. </ul>
    492. 

  492. <p><span class="math inline">→</span> Bypass konnte <strong>nicht</strong> realisiert werden</p>
    493. 

  493. </section>
    494. 

  494. <section id="referenzen" class="slide level1">
    495. 

  495. <h1>Referenzen</h1>
    496. 

  496. <ul>
    497. 

  497. <li><a href="Improved%20Differential%20Cryptanalysis%20of%20Round-Reduced%20Speck">Improved Differential Cryptanalysis of Round-Reduced Speck</a></li>
    498. 

  498. <li><a href="Breaking%20Speck%20cryptosystem%20using%20correlation%20power%20analysis%20attack">Breaking Speck cryptosystem using correlation power analysis attack</a></li>
    499. 

  499. <li><a href="%7BSpeck-R:%20An%20ultra%20light-weight%20cryptographic%20scheme%20for%20Internet%20of%20Things">Speck-R: An ultra light-weight cryptographic scheme for Internet of Things</a></li>
    500. 

  500. </ul>
    501. 

  501. </section>
    502. 

  502.     </div>
    503. 

  503.   </div>
    504. 

  504. 

  505.   <script src="./reveal.js/dist/reveal.js"></script>
    506. 

  506. 

  507.   <!-- reveal.js plugins -->
    508. 

  508.   <script src="./reveal.js/plugin/notes/notes.js"></script>
    509. 

  509.   <script src="./reveal.js/plugin/search/search.js"></script>
    510. 

  510.   <script src="./reveal.js/plugin/zoom/zoom.js"></script>
    511. 

  511. 

  512.   <script>
    513. 

  513. 

  514.       // Full list of configuration options available at:
    515. 

  515.       // https://revealjs.com/config/
    516. 

  516.       Reveal.initialize({
    517. 

  517.         // Display controls in the bottom right corner
    518. 

  518.         controls: true,
    519. 

  519. 

  520.         // Help the user learn the controls by providing hints, for example by
    521. 

  521.         // bouncing the down arrow when they first encounter a vertical slide
    522. 

  522.         controlsTutorial: true,
    523. 

  523. 

  524.         // Determines where controls appear, "edges" or "bottom-right"
    525. 

  525.         controlsLayout: 'bottom-right',
    526. 

  526. 

  527.         // Visibility rule for backwards navigation arrows; "faded", "hidden"
    528. 

  528.         // or "visible"
    529. 

  529.         controlsBackArrows: 'faded',
    530. 

  530. 

  531.         // Display a presentation progress bar
    532. 

  532.         progress: true,
    533. 

  533. 

  534.         // Display the page number of the current slide
    535. 

  535.         slideNumber: true,
    536. 

  536. 

  537.         // 'all', 'print', or 'speaker'
    538. 

  538.         showSlideNumber: 'all',
    539. 

  539. 

  540.         // Add the current slide number to the URL hash so that reloading the
    541. 

  541.         // page/copying the URL will return you to the same slide
    542. 

  542.         hash: false,
    543. 

  543. 

  544.         // Start with 1 for the hash rather than 0
    545. 

  545.         hashOneBasedIndex: false,
    546. 

  546. 

  547.         // Flags if we should monitor the hash and change slides accordingly
    548. 

  548.         respondToHashChanges: true,
    549. 

  549. 

  550.         // Push each slide change to the browser history
    551. 

  551.         history: false,
    552. 

  552. 

  553.         // Enable keyboard shortcuts for navigation
    554. 

  554.         keyboard: true,
    555. 

  555. 

  556.         // Enable the slide overview mode
    557. 

  557.         overview: true,
    558. 

  558. 

  559.         // Disables the default reveal.js slide layout (scaling and centering)
    560. 

  560.         // so that you can use custom CSS layout
    561. 

  561.         disableLayout: false,
    562. 

  562. 

  563.         // Vertical centering of slides
    564. 

  564.         center: true,
    565. 

  565. 

  566.         // Enables touch navigation on devices with touch input
    567. 

  567.         touch: true,
    568. 

  568. 

  569.         // Loop the presentation
    570. 

  570.         loop: false,
    571. 

  571. 

  572.         // Change the presentation direction to be RTL
    573. 

  573.         rtl: false,
    574. 

  574. 

  575.         // see https://revealjs.com/vertical-slides/#navigation-mode
    576. 

  576.         navigationMode: 'default',
    577. 

  577. 

  578.         // Randomizes the order of slides each time the presentation loads
    579. 

  579.         shuffle: false,
    580. 

  580. 

  581.         // Turns fragments on and off globally
    582. 

  582.         fragments: true,
    583. 

  583. 

  584.         // Flags whether to include the current fragment in the URL,
    585. 

  585.         // so that reloading brings you to the same fragment position
    586. 

  586.         fragmentInURL: true,
    587. 

  587. 

  588.         // Flags if the presentation is running in an embedded mode,
    589. 

  589.         // i.e. contained within a limited portion of the screen
    590. 

  590.         embedded: false,
    591. 

  591. 

  592.         // Flags if we should show a help overlay when the questionmark
    593. 

  593.         // key is pressed
    594. 

  594.         help: true,
    595. 

  595. 

  596.         // Flags if it should be possible to pause the presentation (blackout)
    597. 

  597.         pause: true,
    598. 

  598. 

  599.         // Flags if speaker notes should be visible to all viewers
    600. 

  600.         showNotes: false,
    601. 

  601. 

  602.         // Global override for autoplaying embedded media (null/true/false)
    603. 

  603.         autoPlayMedia: null,
    604. 

  604. 

  605.         // Global override for preloading lazy-loaded iframes (null/true/false)
    606. 

  606.         preloadIframes: null,
    607. 

  607. 

  608.         // Number of milliseconds between automatically proceeding to the
    609. 

  609.         // next slide, disabled when set to 0, this value can be overwritten
    610. 

  610.         // by using a data-autoslide attribute on your slides
    611. 

  611.         autoSlide: 0,
    612. 

  612. 

  613.         // Stop auto-sliding after user input
    614. 

  614.         autoSlideStoppable: true,
    615. 

  615. 

  616.         // Use this method for navigation when auto-sliding
    617. 

  617.         autoSlideMethod: null,
    618. 

  618. 

  619.         // Specify the average time in seconds that you think you will spend
    620. 

  620.         // presenting each slide. This is used to show a pacing timer in the
    621. 

  621.         // speaker view
    622. 

  622.         defaultTiming: null,
    623. 

  623. 

  624.         // Enable slide navigation via mouse wheel
    625. 

  625.         mouseWheel: false,
    626. 

  626. 

  627.         // The display mode that will be used to show slides
    628. 

  628.         display: 'block',
    629. 

  629. 

  630.         // Hide cursor if inactive
    631. 

  631.         hideInactiveCursor: true,
    632. 

  632. 

  633.         // Time before the cursor is hidden (in ms)
    634. 

  634.         hideCursorTime: 5000,
    635. 

  635. 

  636.         // Opens links in an iframe preview overlay
    637. 

  637.         previewLinks: false,
    638. 

  638. 

  639.         // Transition style (none/fade/slide/convex/concave/zoom)
    640. 

  640.         transition: 'slide',
    641. 

  641. 

  642.         // Transition speed (default/fast/slow)
    643. 

  643.         transitionSpeed: 'default',
    644. 

  644. 

  645.         // Transition style for full page slide backgrounds
    646. 

  646.         // (none/fade/slide/convex/concave/zoom)
    647. 

  647.         backgroundTransition: 'fade',
    648. 

  648. 

  649.         // Number of slides away from the current that are visible
    650. 

  650.         viewDistance: 3,
    651. 

  651. 

  652.         // Number of slides away from the current that are visible on mobile
    653. 

  653.         // devices. It is advisable to set this to a lower number than
    654. 

  654.         // viewDistance in order to save resources.
    655. 

  655.         mobileViewDistance: 2,
    656. 

  656. 

  657.         // reveal.js plugins
    658. 

  658.         plugins: [
    659. 

  659.           RevealNotes,
    660. 

  660.           RevealSearch,
    661. 

  661.           RevealZoom
    662. 

  662.         ]
    663. 

  663.       });
    664. 

  664.     </script>
    665. 

  665.     </body>
    666. 

  666. </html>
    667.